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DECLARATION OF KAI ULLRICH UNDER 37 C.RR, § 1.131 



I, Kai O. Ullrich, currently residing at Untere Strasse 10, 691 17 Heidelberg, Germany, do 
hereby declare as follows: 

1 . I am the inventor of the subject matter claimed in the above-identified patent application. 

2. Prior to May 23 2003, 1 invented the subject matter of the claims of this patent application 
while being employed at SAP AG, which currently has a place of business at Neurottstrasse 16, 
69190 Walldorf, Germany. At least as early as April 3, 2003, 1 conceived of and proceeded to 
diligently reduce to practice the invention claimed in the above-referenced patent application. 

3. The conception and reduction to practice prior at least as early as April 3, 2003 is 
evidenced by a written invention disclosure form, which was the basis of the above-referenced 
patent application, and which I prepared for submission to in-house patent counsel at SAP AG on 
or about April 3, 2003. The invention disclosure contents describe the invention, and a redacted 
copy of the invention disclosure fonn is included along with this declaration as Schedule A. 

4. Moreover, after conception, and prior to the filing date of the parent application on or 
before June 27, 2003, SAP AG in-house patent counsel engaged and worked diligently with 
patent attorneys, including Mr* James Geary, formerly of Fish & Richardson, PC, to prepare a 
patent application that described the conceived invention, After this diligent preparation work, 
the parent application was filed on June 27, 2003. 

5. I hereby declare that all statements made herein of my own knowledge are true and that 
all statements made on information and belief are believed to be true; and further that these 
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statements are made with the knowledge that willful false statements and the like so made are 
punishable by fine or imprisonment, or both, under Section 1001 of Title 18 of the United States 
Code and that such willful false statements may jeopardize the validity of the application or any 
patent issued thereon. 

Respectfully submitted, 

Dated ^/U/UOi H- A 

Kai O.Ullrich 
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An authscheme describes an algorithm used for authenticating a user of a software 
system, what data is required for the authentication, and the interactions that must 
take place for the authentication process to occur. Different applications may require 
different authschemes. For instance, administrative applications may require a 
higher-priority authscheme than normal application due to access to sensitive data. 
Further, different types of data could require "stronger" or "weaker" user 
authentication. In common internet based software systems, user authentication 
usually takes place globally. Once the user authentication Jias taken place the 
method how the end user proved his identity is no more taken into account when an 
access control decision is to be made. The decision whether access to a resource is 
granted or not is only made based on the identity of the user, not on how this identity 
was proven. 



Authschemes can be associated to resources in such a software system. Every time 
a resource is being accessed by a user the software system checks whether the user 
did log in previously using a certain authscheme. Thereby the system makes sure 
that the user's identity was proven by an authentication mechanism of a certain 
strength. 




Herewith I / We declare that I am / We are the solely and true inventors. 
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Please submit the executed form to the SAP Patent Department in 
Walldorf (Inhouse-mail: PATENT). 



